Hey everybody Reese Ormand here, CEO of Techvera, and today I wanted to go over a quick tech tip Something that we're seeing all the time we've got lots of clients, got lots of friends, asking me "Reese how do we stay protected in this day and age?" You're seeing all these different crypto or ransomware attacks, people getting their email credentials compromised from bad emails, and that sort of thing
And so today I wanted to specifically pinpoint phishing emails Now this is p-h-i-s-h-i-n-g This is the term for a type of email usually poses as someone that you know maybe you've got a friend and their email account gets compromised ok, and now they've sent you a message Maybe they're asking you to click on a link, or here here's that attached file, and then from there if you click on that link you know if you download that file boom your machine is infected your data is getting encrypted or your email username and password is getting compromised and now they're spamming all of the people in your contact or address book So really nasty type of attacks
These phishing emails cost companies all over the world millions of dollars on a daily basis And so what I want to do is put a little user education out there to help you prevent clicking on one of these links or opening one of these infected attachments or getting your account compromised Ok so the first thing you can do in terms of preventing this type of attack is number one did you expect to get an email from this person? If you weren't expecting an email from somebody and they're asking you to open up a file or attachment take a step back reach out to them and see what's going on because more often than not people are you know getting infected right there at the first level they just get a random email from someone looks genuine enough they click on the link boom now they're infected Ok so I want to use this real-life example of a malicious email I got on Monday and I'm going to tell you how immediately I knew that this email was infected or a malicious attempt to try to compromise my email credentials Ok so first thing here this came in on Monday number one I wasn't expecting any kind of e-sign documents from anyone
You know a lot of people now use DocuSign, EchoSign, those types of services to send emails right? Let me show you why I can tell that this is a malicious email right off the bat The address here – now the display name for this email address is DocuSign however you look at the email address and it's some random guy DaveB@3DMSSLLCcom Okay so that right there there's a mismatch the display name is not matching the actual sender's address and that domain I've never heard of do not know so probably not a good sign right? Like I said I wasn't expecting an email in the first place Now here's the other part that can happen often for people
People are a little more leery of opening file attachments usually I have antivirus protection, there's some measures that will protect you sometimes from opening a malicious attachment, but clicking on a malicious link's a little different Right here this this email says "hey you've got a document that you need to sign click here to review the document" Okay before I click on that link if I just hover my mouse over that you can see that this is sending me to some random domain who knows and more often than not it's a genuine website that has gotten itself hacked, it's gotten compromised and hackers have put a page on the backend of this website to use it to to compromise other accounts If you were to click on that link a lot of times it says "ok hey we need you to log in just go ahead and throw your Gmail credentials in here" or you know sometimes it will look like an online banking login for let's say Wells Fargo but it's actually not the genuine Wells Fargo site whatever the case may be The end goal here guys is that these hackers these people that do this malicious stuff want your credentials they want your information and they want to compromise you ok
So be careful about clicking on links, don't open any emails that have attachments or documents that you weren't expecting, look at the sender make sure that that lines up, and if you have a question about any of these things reach out to my team here at Techvera We'll take care of you you guys Stay safe out there, thanks!